Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
File:                     bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json)
Hash identifier:          fOFbCMwK+MR9oEmd/rQWTjgxWYCEdr7ZHDFX2azGQu8=
Subject key identifier:   6F:B4:25:78:E0:94:BD:FA:19:0B:3D:42:02:BA:27:E4:4E:D9:18:DC
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Certificate issuer:       /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial:       019875D07F431CCD5375D96B4EFB83A3CDAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
Manifest number:          161C
Signing time:             Mon 04 Aug 2025 16:00:54 +0000
Manifest this update:     Mon 04 Aug 2025 16:00:54 +0000
Manifest next update:     Tue 05 Aug 2025 16:00:54 +0000
Files and hashes:         1: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: e29Ll0KUSbgka/G9+HkGoTAVgKND4uYZKMTx+q//JyY=)
                          2: oWKu84UqN6ZoGtWTr_LqmwizRJo.roa (hash: sXjtat/2eGC0qh1TKvXgZj2qcJea3TA909ZXBXblsyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:7f:43:1c:cd:53:75:d9:6b:4e:fb:83:a3:cd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
        Validity
            Not Before: Aug  4 16:00:54 2025 GMT
            Not After : Aug  5 16:00:54 2025 GMT
        Subject: CN=6fb42578e094bdfa190b3d4202ba27e44ed918dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:ce:4b:8e:05:7c:db:be:43:38:3e:85:ce:
                    c1:35:a3:71:67:db:6a:10:bf:49:3e:d0:72:18:79:
                    07:8b:cb:68:0d:39:21:e8:8d:59:b3:9b:25:3b:9b:
                    7d:37:d6:15:be:48:e3:e2:59:88:cc:aa:1f:84:78:
                    e0:77:a3:b5:23:a3:c8:bf:19:87:c6:90:2d:21:22:
                    7e:df:ab:fa:95:eb:e0:4e:60:a5:f2:1a:0f:9d:86:
                    da:53:ad:bd:7b:40:55:f8:c0:fd:80:74:90:58:fa:
                    99:b3:de:98:9c:8f:47:f6:ff:67:92:ce:73:70:f8:
                    b1:5b:fc:35:b4:2a:fa:11:51:05:84:95:60:5e:19:
                    2b:b8:5c:a1:72:31:44:63:68:de:c1:eb:8e:89:d1:
                    0b:53:b6:b2:43:1c:2b:11:dd:ea:69:c1:d6:a2:1a:
                    b9:91:23:c9:08:10:e4:b2:a2:71:e5:21:b6:43:cf:
                    38:e9:c2:5d:3f:ae:75:4a:36:6c:4e:bd:1f:3b:db:
                    47:10:73:36:b7:36:12:0d:ad:93:74:53:d9:bb:85:
                    5c:fd:19:5b:c6:4c:fe:b0:dc:95:b1:aa:7b:7b:ff:
                    f3:16:72:8a:a4:52:00:59:41:f8:61:54:b8:3d:51:
                    8c:bd:15:1d:ac:fa:81:41:33:20:c5:aa:de:6e:7a:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B4:25:78:E0:94:BD:FA:19:0B:3D:42:02:BA:27:E4:4E:D9:18:DC
            X509v3 Authority Key Identifier:
                keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f9:78:90:a4:1b:71:13:84:03:98:d5:76:ef:06:34:10:fa:
         c7:bb:db:ba:0a:23:a5:64:3f:af:f1:8b:d2:e6:39:a4:c1:85:
         2c:25:9c:66:11:a3:61:9e:32:4d:d0:70:9d:4d:5a:cb:40:5d:
         80:7a:db:fc:3f:1a:77:40:3e:50:23:21:cc:a2:cb:a8:b7:5e:
         f1:fe:06:0f:91:4d:51:a6:37:86:f2:a6:50:58:cc:ef:2d:17:
         94:d6:22:5f:01:01:ff:1e:69:6e:0c:49:95:77:7d:e9:ac:3b:
         93:10:9d:59:8c:59:96:65:cb:0b:41:72:be:47:97:9e:bc:cd:
         41:05:06:f4:22:ba:b5:59:a9:11:ca:71:2d:64:69:2b:19:f7:
         cc:a7:18:17:ff:54:92:83:bc:18:f0:0b:1e:4d:6b:db:5f:75:
         18:39:eb:2e:75:4a:15:7f:c8:69:6f:10:d7:39:16:43:47:d3:
         cf:1f:47:2b:3b:2f:0d:fd:32:4b:66:3e:01:88:64:e8:44:b4:
         a4:b0:6b:9e:c6:cc:b5:9d:f7:0b:bb:1c:e4:ca:0e:db:31:f3:
         fb:35:0a:d3:f6:89:1e:2f:62:c9:57:53:0e:94:62:9e:2b:c9:
         67:a1:74:43:c3:48:08:31:11:c7:d7:2c:7f:a2:b8:3a:4f:de:
         c2:77:0d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:15 2025 by rpki-client